4 ms·
Multiple Vulnerabilities in MobaXterm
MobaXterm has multiple vulnerabilites, which can lead to man in the middle attcks.
Due to a missing fingerprint check, it's possible to intercept the ssh client. Even publickey authentication can be intercepted because the ssh-agent is forwarded in the default configuration.
An update to the latest version of MobaXterm is strongly recommended.
Full disclosure:
* https://docs.ssh-mitm.at/vulnerabilities/CVE-2022-38336.html
* https://docs.ssh-mitm.at/vulnerabilities/CVE-2022-38337.html